City: unknown
Region: unknown
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 191.14.135.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63994
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;191.14.135.245. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 16:14:29 CST 2022
;; MSG SIZE rcvd: 107245.135.14.191.in-addr.arpa domain name pointer 191-14-135-245.user.vivozap.com.br.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
245.135.14.191.in-addr.arpa name = 191-14-135-245.user.vivozap.com.br.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.199.13.142 | attack | Dec 14 08:21:19 ns3042688 sshd\[18692\]: Invalid user cheungwl from 139.199.13.142 Dec 14 08:21:19 ns3042688 sshd\[18692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 Dec 14 08:21:22 ns3042688 sshd\[18692\]: Failed password for invalid user cheungwl from 139.199.13.142 port 45934 ssh2 Dec 14 08:26:13 ns3042688 sshd\[20412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 user=root Dec 14 08:26:15 ns3042688 sshd\[20412\]: Failed password for root from 139.199.13.142 port 34194 ssh2 ... |
2019-12-14 15:44:05 |
| 167.99.155.36 | attackbots | Dec 13 21:32:16 php1 sshd\[30623\]: Invalid user mo from 167.99.155.36 Dec 13 21:32:16 php1 sshd\[30623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36 Dec 13 21:32:18 php1 sshd\[30623\]: Failed password for invalid user mo from 167.99.155.36 port 34110 ssh2 Dec 13 21:37:33 php1 sshd\[31081\]: Invalid user sutardja from 167.99.155.36 Dec 13 21:37:33 php1 sshd\[31081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36 |
2019-12-14 15:41:51 |
| 150.145.87.20 | attackspambots | Dec 14 01:00:20 cumulus sshd[30257]: Invalid user test from 150.145.87.20 port 41330 Dec 14 01:00:20 cumulus sshd[30257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.145.87.20 Dec 14 01:00:22 cumulus sshd[30257]: Failed password for invalid user test from 150.145.87.20 port 41330 ssh2 Dec 14 01:00:22 cumulus sshd[30257]: Received disconnect from 150.145.87.20 port 41330:11: Bye Bye [preauth] Dec 14 01:00:22 cumulus sshd[30257]: Disconnected from 150.145.87.20 port 41330 [preauth] Dec 14 01:16:50 cumulus sshd[31270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.145.87.20 user=r.r Dec 14 01:16:51 cumulus sshd[31270]: Failed password for r.r from 150.145.87.20 port 54260 ssh2 Dec 14 01:16:52 cumulus sshd[31270]: Received disconnect from 150.145.87.20 port 54260:11: Bye Bye [preauth] Dec 14 01:16:52 cumulus sshd[31270]: Disconnected from 150.145.87.20 port 54260 [preauth] Dec 14 ........ ------------------------------- |
2019-12-14 15:26:34 |
| 62.210.167.202 | attackbotsspam | \[2019-12-14 01:27:37\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-14T01:27:37.521-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011114242671090",SessionID="0x7f0fb418df78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/57515",ACLName="no_extension_match" \[2019-12-14 01:28:27\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-14T01:28:27.680-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011214242671090",SessionID="0x7f0fb418df78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/62478",ACLName="no_extension_match" \[2019-12-14 01:29:19\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-14T01:29:19.251-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="011414242671090",SessionID="0x7f0fb406f938",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.167.202/54740",ACLName="no_ |
2019-12-14 15:19:59 |
| 70.106.246.46 | attackspam | Unauthorized connection attempt detected from IP address 70.106.246.46 to port 8080 |
2019-12-14 15:14:19 |
| 212.144.5.186 | attackbotsspam | Dec 14 07:11:59 roki sshd[16049]: Invalid user barra from 212.144.5.186 Dec 14 07:11:59 roki sshd[16049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.144.5.186 Dec 14 07:12:00 roki sshd[16049]: Failed password for invalid user barra from 212.144.5.186 port 31312 ssh2 Dec 14 07:28:55 roki sshd[17349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.144.5.186 user=root Dec 14 07:28:57 roki sshd[17349]: Failed password for root from 212.144.5.186 port 24260 ssh2 ... |
2019-12-14 15:38:54 |
| 195.154.119.48 | attackbots | Dec 14 07:14:57 game-panel sshd[8209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.119.48 Dec 14 07:14:58 game-panel sshd[8209]: Failed password for invalid user uk from 195.154.119.48 port 57626 ssh2 Dec 14 07:20:49 game-panel sshd[8450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.119.48 |
2019-12-14 15:37:08 |
| 45.236.129.169 | attackbotsspam | Dec 14 14:31:20 webhost01 sshd[2190]: Failed password for root from 45.236.129.169 port 40466 ssh2 Dec 14 14:39:29 webhost01 sshd[2383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.129.169 ... |
2019-12-14 15:47:36 |
| 222.186.175.181 | attack | SSH bruteforce (Triggered fail2ban) |
2019-12-14 15:36:05 |
| 54.37.138.172 | attack | Dec 14 08:08:07 legacy sshd[19907]: Failed password for root from 54.37.138.172 port 38426 ssh2 Dec 14 08:13:40 legacy sshd[20041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.138.172 Dec 14 08:13:41 legacy sshd[20041]: Failed password for invalid user lexi from 54.37.138.172 port 46908 ssh2 ... |
2019-12-14 15:25:52 |
| 212.237.63.28 | attackbots | Dec 14 07:23:49 v22018086721571380 sshd[24255]: Failed password for invalid user guest from 212.237.63.28 port 55394 ssh2 |
2019-12-14 15:32:18 |
| 201.20.36.4 | attack | Invalid user adriana from 201.20.36.4 port 38830 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.20.36.4 Failed password for invalid user adriana from 201.20.36.4 port 38830 ssh2 Invalid user hume from 201.20.36.4 port 63096 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.20.36.4 |
2019-12-14 15:40:48 |
| 218.241.134.34 | attackspam | Dec 14 07:49:00 eventyay sshd[19970]: Failed password for news from 218.241.134.34 port 43593 ssh2 Dec 14 07:55:22 eventyay sshd[20222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.241.134.34 Dec 14 07:55:24 eventyay sshd[20222]: Failed password for invalid user ursuline from 218.241.134.34 port 19075 ssh2 ... |
2019-12-14 15:15:54 |
| 79.115.134.15 | attackbots | Unauthorized connection attempt detected from IP address 79.115.134.15 to port 23 |
2019-12-14 15:46:21 |
| 165.22.118.37 | attack | Dec 14 08:28:57 dedicated sshd[1397]: Invalid user jghf from 165.22.118.37 port 40238 |
2019-12-14 15:37:27 |